Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a633030303a3a2f33342d3334203d3e20323633393631.roa
File:                     323830343a323836383a633030303a3a2f33342d3334203d3e20323633393631.roa (raw, json)
Hash identifier:          SdIGyjehPjv7aWRzmvy+cWipLf/C561t4iqS3IO2Eeg=
Subject key identifier:   31:7A:83:7B:E8:22:BE:31:2A:5F:5A:84:2B:70:F7:71:53:AD:71:F4
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       583D85A6F6A3640558212026F29ED99B25A30F50
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a633030303a3a2f33342d3334203d3e20323633393631.roa
Signing time:             Thu 05 Feb 2026 01:34:10 +0000
ROA not before:           Thu 05 Feb 2026 01:29:10 +0000
ROA not after:            Thu 04 Feb 2027 01:34:10 +0000
asID:                     263961
IP address blocks:        2804:2868:c000::/34 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3d:85:a6:f6:a3:64:05:58:21:20:26:f2:9e:d9:9b:25:a3:0f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Feb  5 01:29:10 2026 GMT
            Not After : Feb  4 01:34:10 2027 GMT
        Subject: CN=317A837BE822BE312A5F5A842B70F77153AD71F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:99:e3:2b:52:59:52:87:cb:8b:25:83:32:b1:
                    bf:aa:b5:d5:6e:e4:bd:0a:5a:3f:e2:36:41:12:30:
                    24:9f:aa:61:dd:99:8d:e4:3d:fd:9f:ad:5d:15:e4:
                    79:b6:0a:da:8a:f0:fd:6a:39:e9:cf:7d:1f:32:68:
                    36:92:ac:1e:38:5f:39:a4:df:1b:8b:f7:56:10:9a:
                    50:43:90:c0:3b:34:6c:0b:9a:46:6a:a4:c1:76:b3:
                    73:1b:f2:2d:5b:1d:58:13:5c:da:f4:e5:f5:0e:f5:
                    97:e9:61:83:0a:de:4b:81:0a:92:1a:b5:de:7d:9d:
                    27:61:cd:b5:cc:19:d1:db:17:ca:a6:05:8f:7b:2d:
                    ea:8a:54:f5:23:c4:fd:0b:7f:21:f1:f8:16:6d:6f:
                    28:0c:a6:03:fd:eb:06:85:8d:8d:72:97:b8:96:53:
                    df:7d:33:8d:72:62:ff:45:29:ea:42:1d:7d:b1:0e:
                    ea:03:1a:91:9e:62:3d:c8:3a:40:b5:0d:36:cd:d5:
                    52:72:96:b2:6f:cf:74:4d:ba:cc:ab:2a:c9:b3:cb:
                    a4:ba:fd:34:dd:08:03:06:18:55:be:1c:f4:5b:f6:
                    3d:40:34:2a:b8:58:bf:8c:ef:1a:a0:13:56:e4:0d:
                    0a:15:a4:cc:ea:43:a3:80:4f:92:3d:2f:b8:71:fc:
                    e5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7A:83:7B:E8:22:BE:31:2A:5F:5A:84:2B:70:F7:71:53:AD:71:F4
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a633030303a3a2f33342d3334203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2868:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:a8:5c:f4:d6:cd:9a:15:b3:a7:2a:6b:70:cf:9c:33:9b:20:
         54:32:22:eb:34:49:a4:1f:d0:2d:7c:bf:4c:2d:65:e9:15:4f:
         80:9f:57:ec:c1:b0:09:b1:f0:01:28:77:ac:bc:15:34:f2:a5:
         37:61:11:eb:59:35:4a:a9:a3:cc:78:43:aa:89:2c:25:b1:3c:
         9f:4e:69:a9:73:8a:8e:5c:51:52:86:1b:3d:b9:5a:de:e2:5f:
         79:22:b6:f9:6a:a9:28:ae:f5:0b:38:4b:20:71:5c:69:39:07:
         e1:69:e9:61:31:6e:04:76:f2:df:90:21:e4:8a:d8:62:7e:06:
         cb:49:a0:0c:6b:9f:e0:10:3c:5b:59:0a:35:7a:4b:f9:75:9a:
         c1:99:2a:07:2c:37:04:a6:28:a7:05:33:4b:43:ff:f1:9b:78:
         ee:56:18:17:22:40:90:58:71:93:60:5e:92:7d:3a:f1:17:1a:
         14:1d:b6:56:c2:ce:20:bc:74:66:ab:f1:3d:ce:dc:f4:b3:85:
         79:5c:8b:ba:10:cb:12:11:57:3f:60:a0:6a:1c:22:31:90:d2:
         70:92:86:5a:f1:72:40:03:4e:d3:91:08:5e:0f:3a:51:23:6e:
         72:6a:32:d2:e2:0a:c6:b7:c9:dc:28:68:ca:82:93:20:18:ca:
         8f:6e:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:08 2026 by rpki-client